Hammer authentication : does it support redhat sso?

Support
1

Hello,
Does hammer support RH SSO authentication method ?
Regards

2

In 3.5+ it does, @Marek_Hulan or @ofedoren will have more details.

1 Like
3

Here you can find more information: Foreman :: Manual

4

Hello,

I just have tried the

hammer -v auth login oauth --two-factor --oidc-token-endpoint … command

(I need to use an http proxy - I don’t know to tell hammer to use a proxy for than in the command line - so I didn’t).

The command issued the error :
“Can’t perform login. Make sure sessions are enabled in hammer configuration file.”

I have added the files to /etc/hammer/cli_config.yml file :

:foreman:
:use_sessions: true

Same error. Not really verbose output.

Any tip please ?
Regards

5

Hello @jfwl,

-v flag is not so useful for debugging purposes, could you attach command’s output, but with -d flag?

Also, in hammer you can specify the server to make calls to either in ~/.hammer/cli.modules.d/foreman.yml config file or specifying -s <fqdn> option.

7

As for now, it still seems like wrong config file since hammer can’t fetch use_sessions: true.

Could you please add this into a different config file? In your case I guess it should land in /etc/hammer/cli.modules.d/foreman.yml. Also, please be aware that this is YAML formatted file, thus the spaces must follow specifications:

:foreman:
  :use_sessions: true

EDIT: I should have mentioned this earlier, but when pasting debug output, please verify that no internal/private information is shared for you own good.

1 Like
8

Thank you . It worked.
It aks me for a code now :
“Code:”

1 Like
10

Hello,
Since I’m able to get the code and enter it.
The problem is that after I entered the code, hammer try to contact oidc-token-endpoint and oidc-authorization-endpoint,using https
The problem (I’ve checked using tcpdump) that even if the variable https_proxy is set, hammer tries to directly connect to thoses URL.
And because I need to tell hammer to use a proxy to do so hammer failed.
Any idea please ?

11

Thank you to have a look @ofedoren

13

Hello !